lsass.exe boot loop

[bill deverell]

I have symptoms of a partial infection with Sasser worm.
This is even though I am up to date with critical updates
and have McAfee VS and Firewall. I have run several
removal tools and they all report the system as clean !!

The symptoms are
1 I do shutdown and restart.
2 Just before the Welcome screen I get a small window
entitled "lsass operation failed" with an error message
something like "the requested operation was
unscuccessful". Before I can click the mouse the computer
shuts down (power off). If I switch back on the error is
repeated.
3 BUT if I wait about 2 minutes the computer comes up OK !!
4 If I then do a restart within about 2 minutes again all
OK but if I wait much longer the error is back.

The problem is liveable with but I would like to clean it
off. Any ideas??

 

[Couzin2000]

I have symptoms of a partial infection with Sasser worm.
This is even though I am up to date with critical updates
and have McAfee VS and Firewall. I have run several
removal tools and they all report the system as clean !!

The symptoms are
1 I do shutdown and restart.
2 Just before the Welcome screen I get a small window
entitled "lsass operation failed" with an error message
something like "the requested operation was
unscuccessful". Before I can click the mouse the computer
shuts down (power off). If I switch back on the error is
repeated.
3 BUT if I wait about 2 minutes the computer comes up OK !!
4 If I then do a restart within about 2 minutes again all
OK but if I wait much longer the error is back.

The problem is liveable with but I would like to clean it
off. Any ideas??

Symantec have developed a removal tool of the Sasser virus, and I
believe Microsoft has one as well. However, there are several variants
to this virus, and you should promptly backup all your personals, then
do a complete format/reinstall. I've had to deal with this problem,
and I've since then gotten Acronis TrueImage to backup my entire PC
(over 120Gb of stuff), and it's totally worth it.
I had to use ERD Commander to get inside a PC that was locked by
sasser, and there is no way around this virus's lockdown -- it's a
killer. BACKUP!!!